Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2023:4224-1

Опубликовано: 27 окт. 2023
Источник: suse-cvrf

Описание

Security update for zchunk

This update for zchunk fixes the following issues:

  • CVE-2023-46228: Fixed a handle overflow errors in malformed zchunk files. (bsc#1216268)

Список пакетов

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production
libzck1-1.1.5-150200.3.5.1
Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production
libzck1-1.1.5-150200.3.5.1
Image SLES15-SP3-SAP-Azure-LI-BYOS-Production
libzck1-1.1.5-150200.3.5.1
Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production
libzck1-1.1.5-150200.3.5.1
SUSE Enterprise Storage 7.1
libzck-devel-1.1.5-150200.3.5.1
libzck1-1.1.5-150200.3.5.1
zchunk-1.1.5-150200.3.5.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS
libzck-devel-1.1.5-150200.3.5.1
libzck1-1.1.5-150200.3.5.1
zchunk-1.1.5-150200.3.5.1
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS
libzck-devel-1.1.5-150200.3.5.1
libzck1-1.1.5-150200.3.5.1
zchunk-1.1.5-150200.3.5.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS
libzck-devel-1.1.5-150200.3.5.1
libzck1-1.1.5-150200.3.5.1
zchunk-1.1.5-150200.3.5.1
SUSE Linux Enterprise Server 15 SP2-LTSS
libzck-devel-1.1.5-150200.3.5.1
libzck1-1.1.5-150200.3.5.1
zchunk-1.1.5-150200.3.5.1
SUSE Linux Enterprise Server 15 SP3-LTSS
libzck-devel-1.1.5-150200.3.5.1
libzck1-1.1.5-150200.3.5.1
zchunk-1.1.5-150200.3.5.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2
libzck-devel-1.1.5-150200.3.5.1
libzck1-1.1.5-150200.3.5.1
zchunk-1.1.5-150200.3.5.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3
libzck-devel-1.1.5-150200.3.5.1
libzck1-1.1.5-150200.3.5.1
zchunk-1.1.5-150200.3.5.1
SUSE Manager Proxy 4.2
libzck-devel-1.1.5-150200.3.5.1
libzck1-1.1.5-150200.3.5.1
zchunk-1.1.5-150200.3.5.1
SUSE Manager Server 4.2
libzck-devel-1.1.5-150200.3.5.1
libzck1-1.1.5-150200.3.5.1
zchunk-1.1.5-150200.3.5.1

Ссылки

Описание

zchunk before 1.3.2 has multiple integer overflows via malformed zchunk files to lib/comp/comp.c, lib/comp/zstd/zstd.c, lib/dl/multipart.c, or lib/header.c.

Затронутые продукты
Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:libzck1-1.1.5-150200.3.5.1
Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:libzck1-1.1.5-150200.3.5.1
Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:libzck1-1.1.5-150200.3.5.1
Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:libzck1-1.1.5-150200.3.5.1
Ссылки